DATASHEETApplication Control for Windows
Increase Endpoint Security
and Reduce IT Workload and Cost

Zero Day Malware Mitigation:
Trusted Ownership™

Ivanti® Application Control for Windows offers IT

Application Control uses Trusted Ownershipunprecedented control over endpoints, reducing

checking for out-of-the-box endpoint security. It

security risk while providing a great user experience

relies on examining the NTFS owner of an application.

for Windows environments. In addition to contextual

If an application is introduced, and hence owned

application control, the solution delivers secure

by, a non-trusted owner (e.g., a standard user), theWindows privilege management that lets you remove

application is prevented instantly from running.

users’ full admin rights and prevents unauthorized
executables such as malware, ransomware,unlicensed software, and other unknown applications
from being installed or executed. Application Control
also Ivanti enables your IT team to manage application
access and user privileges efficiently across yourdesktop and server estate.

However, if an application is introduced and owned
by a trusted owner (e.g., an administrator or asoftware deployment system such as MicrosoftUEM), then every user can run the application, unlessotherwise stated. This alleviates the ongoing burdenof maintaining allowed lists associated with otherapplication control solutions when application or

Allowed and Denied Lists
Application Control allows authorized access toFull Windows Support

operating system content requires patching.

server applications, services, and components,

Application Control delivers full support for Windows

Digital Signatures

IT can check file metadata – including vendor,

Server 2022 and extended support for Windows
10 and 11, expanding its ability to stop ransomware
and malware. It provides IT admins with enhanced,
granular end-user controls to improve end-user
personalization and endpoint security.
ivanti.com

based on application allowed lists. Additionally,You can assign SHA-1, SHA-256, or ADLER32

certificate, publisher, version, and more – todigital signatures to applications and files to ensure

ensure applications, components, and scripts

application integrity and to prevent modified or

are original and are preventing modified

spoofed applications from executing.

or spoofed applications from executing.

Windows Privilege Management

License Management

Providing users with full admin rights can leave

Application Control is recognized by Microsoft for

endpoints vulnerable, significantly increasing

enforcing device-based software license control.

security and manageability costs, decreasing

By controlling which users or devices have permission

productivity, creating legal and liability issues,

to run named applications, you can define limits on

and making compliance difficult. By removing

the number of application instances, which devices

users’ full admin rights and providing them withor users can run the application, when users canelevated privileges for just the apps or tasks

run a program, and for how long.

they need, you can simplify endpoint security,reduce support calls, and lower TCO.

On-Demand Policy Change Requests

User Workspace Manager
Application Control for Windows is part of the Ivanti
User Workspace Manager (UWM) suite, which also

Ivanti Application Control simplifies management ofincludes Application Control for Linux, Environment

temporary access requests for IT helpdesk staff. Users

Manager, Performance Manager, Browser Manager

can respond directly to denial of access notifications

and File Director. Using a centralized managementwith a request for temporary access. These requestsconsole for all of the Windows-based applications

can be routed directly to an integrated Ivanti Neurons

in the suite, UWM helps organizations to deliver

for ITSM or ServiceNow helpdesk for immediate

responsive, secure desktops that provide anresponse, fully automated where appropriate.

outstanding employee experience, save money on

URL Redirection
Ivanti Application Control for Windows
provides autonomous, seamless redirection ofprohibited URL’s to a known, trusted web page.

Application Archiving

servers, manage users more effectively and reduce
endpoint security risk.

Reporting and Insights
Application Control outputs a series of configurable
events that track environment-wide instances ofexecution denials, elevation of privileges and other

Application Control automatically copies

access-associated tasks. Application Control storesprohibited files that users have attempted

the audited events in the database, enabling you

to run and stores them in a secure repository

to report on the activities of your defined policies

for secured analysis.

in order to ensure that they are not preventing
legitimate activities from being carried out. You canaccess pre-built dashboards and reports generated
from this aggregated event data via the Ivanti UWMManagement Center or the Ivanti Xtraction
self-service reporting software.

Copyright © 2021, Ivanti. All rights reserved. IVI-1828 4/22 PB/SP/FG/DH

ivanti.com
1 800 982 2130
sales@ivanti.com